Organizations should regularly undertake comprehensive, focused assessment of potential risks to the organization. This focused assessment should occur at least twice a year by a team of staff members representing all the major functions of the organization. The assessment should be carefully planned, documented and methodically carried out.
Comprehensive checklists help a great deal to quickly review a wide range of organizational aspects. Other aspects require more careful review.
Are you at Risk?